[geoip][country_name] long value

Elastic Stack Logstash
1

Hi,

The field [geoip][country_name] writes a long value in memcached instead of only the string:

" DMZ1:ET

instead of:

DMZ1

I guess I am addressing it incorrectly. Is there any suggestion out there? Thanks!

<geoip {
database => "/usr/share/logstash/host/networkzones.mmdb"
fields => ["country_name"]
source => "host.ip"
}

memcached {
hosts => ["x.y.x.t:11211"]
set => { "[geoip][country_name]" => "%{host.ip}" }
}
/>

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.